CWE-372 · 11 records

Incomplete Internal State Distinction

CVEs in this class

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2024-22590No exploit	The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection.CWE-372 Pre-auth	Critical9.1	—	0.5%	May 28, 2024
30Monitor	CVE-2020-27222No exploit	In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS sereclipse · californium · CWE-372 Pre-auth Denial of service	High7.5	—	0.8%	Feb 3, 2021
30Monitor	CVE-2023-4012No exploit	Incomplete Internal State Distinction in ntpsecntpsec · ntpsec · CWE-372 Pre-auth Denial of service	High7.5	—	0.4%	Aug 7, 2023
28Monitor	CVE-2021-25735Proof of concept	Validating Admission Webhook does not observe some previous fieldskubernetes · kubernetes · CWE-372	Medium6.5	—	5.3%	Sep 6, 2021
27Monitor	CVE-2026-41300No exploit	OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboardingopenclaw · openclaw · CWE-372 Pre-auth	Medium6.9	—	0.4%	Apr 20, 2026
27Monitor	CVE-2023-54406No exploit	Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scriptsfrappe · frappe · CWE-372	Medium6.9	—	0.3%	Oct 12, 2026
27Monitor	CVE-2026-84897No exploit	wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and wolfssh · wolfssh · CWE-372 Pre-auth	Medium6.9	—	0.3%	Oct 7, 2026
26Monitor	CVE-2023-36834No exploit	Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoSjuniper · junos · CWE-372 Pre-auth Denial of service	Medium6.5	—	0.3%	Jul 14, 2023
25Monitor	CVE-2026-41340No exploit	OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migrationopenclaw · openclaw · CWE-372 Pre-auth Auth bypass	Medium6.3	—	0.4%	Apr 23, 2026
25Monitor	CVE-2026-41388No exploit	OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handlingopenclaw · openclaw · CWE-372 Pre-auth	Medium6.3	—	0.4%	Apr 28, 2026
0Monitor	GHSA-86h5-xcpx-cfqcNo exploit	ASA-2024-005: Potential slashing evasion during re-delegationGo · github.com/cosmos/cosmos-sdk · CWE-372	Low	—	—	Feb 27, 2024

CVE-2024-22590
36Monitor
The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
May 28, 2024
CVE-2020-27222
30Monitor
In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS ser
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
eclipse · californiumFeb 3, 2021
CVE-2023-4012
30Monitor
Incomplete Internal State Distinction in ntpsec
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ntpsec · ntpsecAug 7, 2023
CVE-2021-25735
28Monitor
Validating Admission Webhook does not observe some previous fields
MediumCVSS 6.5Proof of conceptEPSS 5%
kubernetes · kubernetesSep 6, 2021
CVE-2026-41300
27Monitor
OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboarding
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
openclaw · openclawApr 20, 2026
CVE-2023-54406
27Monitor
Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scripts
MediumCVSS 6.9No exploitEPSS 0%
frappe · frappeOct 12, 2026
CVE-2026-84897
27Monitor
wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
wolfssh · wolfsshOct 7, 2026
CVE-2023-36834
26Monitor
Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Denial of service
juniper · junosJul 14, 2023
CVE-2026-41340
25Monitor
OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migration
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
openclaw · openclawApr 23, 2026
CVE-2026-41388
25Monitor
OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handling
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
openclaw · openclawApr 28, 2026
GHSA-86h5-xcpx-cfqc
0Monitor
ASA-2024-005: Potential slashing evasion during re-delegation
LowNo exploit
Go · github.com/cosmos/cosmos-sdkFeb 27, 2024

All vulnerability classes